Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer
File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer (raw, json)
Hash identifier: goLeUWHpQPCH/7gMIAnuHPYfk7cbRmYJEh2iw5Eg+sU=
Subject key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 56ED
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
caRepository: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 19 Jun 2024 03:46:53 +0000
Certificate not after: Sun 31 Aug 2025 00:00:00 +0000
Subordinate resources: IP: 148.109.0.0/16
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 Nov 2024 20:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22253 (0x56ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Validity
Not Before: Jun 19 03:46:53 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:a4:b8:e6:95:cd:fc:12:4a:e9:c0:6f:cc:
21:24:4d:00:59:cd:c4:ea:76:e0:61:e0:c7:43:28:
c8:f3:75:9d:63:36:1e:e9:2d:02:8b:60:e1:89:70:
8c:0e:61:38:a6:2a:1c:d6:e4:5e:ab:c2:43:58:b2:
ae:72:77:5b:66:cf:e6:55:9c:ca:d7:69:ba:bc:2c:
36:d4:c6:0a:88:0a:fb:0e:86:28:fa:63:a3:c4:77:
ec:56:13:43:8b:8f:54:aa:44:0f:7b:a0:7e:d4:41:
a7:93:72:1d:68:22:02:65:44:79:f0:e8:32:92:12:
a0:f2:ac:7f:d5:b9:1c:fd:26:11:a4:bd:25:b2:1d:
de:e2:60:46:ce:e0:20:e3:80:cb:d5:76:8a:5e:e2:
6c:45:38:d9:c0:8c:46:cf:be:e3:b8:77:be:95:df:
ac:30:e9:13:51:54:31:4e:26:0c:0e:b4:e2:2c:57:
12:96:5d:0f:de:2c:cb:ce:67:c4:66:99:35:e0:51:
3c:a0:93:01:c4:d8:fe:d1:4f:fe:93:05:06:13:9f:
b7:38:37:11:a6:44:b1:d8:d3:dd:74:18:1a:59:1a:
2e:a3:d2:7e:45:4c:e7:83:8c:4d:75:35:db:cc:5e:
88:32:ca:e4:39:d1:51:82:22:dc:02:47:93:71:6c:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
148.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:c2:5c:fe:3d:75:27:c2:93:19:cb:7b:79:b2:3c:77:5d:7d:
1a:f4:ff:ef:32:de:8f:7c:24:4f:37:2c:f3:c4:5c:9b:37:51:
94:e9:7a:32:ab:01:e8:fd:e4:42:f1:72:8a:49:d9:d0:b9:6b:
e5:b6:4c:ba:c7:b6:0e:62:94:55:25:38:b4:be:0e:e5:b5:76:
57:cd:31:b1:af:ec:d8:23:72:e0:b6:26:d6:b1:86:cf:ca:95:
b0:72:fc:90:29:be:4d:60:66:f8:4c:91:42:3f:08:96:0d:e8:
d1:d6:52:55:30:56:d0:54:4b:a6:90:a3:0f:d7:bd:2a:13:77:
66:b2:8b:e4:ff:f8:e1:10:dc:8a:c7:f2:5a:67:4a:f1:65:5a:
55:ca:26:0c:94:7e:68:d0:2c:90:fb:14:a6:75:94:95:31:b1:
67:a6:4a:b5:77:b3:9f:b1:b1:0e:ec:57:13:a9:d5:d8:79:2d:
ec:bf:aa:aa:c8:b9:ea:8a:98:a6:30:87:5f:8a:29:7b:46:e0:
fd:95:c4:34:ac:d7:be:26:2d:bf:b9:ca:af:cb:c3:f5:d5:95:
cf:93:39:10:f0:85:06:87:98:69:cb:bc:5c:e4:ab:79:f6:35:
e2:7f:c6:ec:3d:e2:6a:66:af:a8:68:78:8f:15:18:b5:86:31:
a8:e0:7e:d4
-----BEGIN CERTIFICATE-----
MIIF/DCCBOSgAwIBAgICVu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQwNjE5MDM0NjUzWhcNMjUwODMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE0QzRFRDExMC8GA1UEBRMoRDk4NTI5MTQ4Q0JBNURERUQzQjczRDYw
NTJFRTA1MTZDMDI0QzRGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AMFdpLjmlc38EkrpwG/MISRNAFnNxOp24GHgx0MoyPN1nWM2HuktAotg4YlwjA5h
OKYqHNbkXqvCQ1iyrnJ3W2bP5lWcytdpurwsNtTGCogK+w6GKPpjo8R37FYTQ4uP
VKpED3ugftRBp5NyHWgiAmVEefDoMpISoPKsf9W5HP0mEaS9JbId3uJgRs7gIOOA
y9V2il7ibEU42cCMRs++47h3vpXfrDDpE1FUMU4mDA604ixXEpZdD94sy85nxGaZ
NeBRPKCTAcTY/tFP/pMFBhOftzg3EaZEsdjT3XQYGlkaLqPSfkVM54OMTXU128xe
iDLK5DnRUYIi3AJHk3Fsm4ECAwEAAaOCAvIwggLuMB0GA1UdDgQWBBTZhSkUjLpd
3tO3PWBS7gUWwCTE8zAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEM0RUQvNzU5ODQ0NDQ3MjBEMTFFREI1NDVFMDMwQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTRDNEVELzc1OTg0NDQ0NzIwRDExRURCNTQ1RTAzMEM0RjlBRTAyLzJZVXBGSXk2
WGQ3VHR6MWdVdTRGRnNBa3hQTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0w
CwQCAAEwBQMDAJRtMA0GCSqGSIb3DQEBCwUAA4IBAQAzwlz+PXUnwpMZy3t5sjx3
XX0a9P/vMt6PfCRPNyzzxFybN1GU6XoyqwHo/eRC8XKKSdnQuWvltky6x7YOYpRV
JTi0vg7ltXZXzTGxr+zYI3LgtibWsYbPypWwcvyQKb5NYGb4TJFCPwiWDejR1lJV
MFbQVEumkKMP170qE3dmsovk//jhENyKx/JaZ0rxZVpVyiYMlH5o0CyQ+xSmdZSV
MbFnpkq1d7OfsbEO7FcTqdXYeS3sv6qqyLnqipimMIdfiil7RuD9lcQ0rNe+Ji2/
ucqvy8P11ZXPkzkQ8IUGh5hpy7xc5Kt59jXif8bsPeJqZq+oaHiPFRi1hjGo4H7U
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:04:29 2024 by rpki-client on console-fra.rpki-client.org